mass.report
Scan Intelligence Report0/100
high Risk
bluekit.cc
https://bluekit.cc/
IP
172.67.180.211 · Cloudflare, Inc.
Location
Toronto, Canada
Domain Age
31 days
HTTP
200 · 21.3s
SSL
Valid· E7, Let's Encrypt, US
Status
COMPLETED
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
bluekit
Vendors
29/30
Status
partial
✓ brightcloud✓ avg✓ drweb✓ eset✓ polyswarm✓ sophos✓ yandex✓ microsoft✓ bitdefender✓ avast✗ norton✓ apple✓ urlquery✓ emsisoft✓ cisa✓ phishtank✓ isitphish✓ virustotal✓ urlabuse✓ urlscan✓ spamhaus✓ google✓ kaspersky✓ mcafee✓ openphish✓ apwg✓ phishreport✓ netcraft✓ threatyeti✓ fortiguard
KB/IOK Matches (0)—
No KB/IOK detections were recorded for this scan.
bluekit
UnknownOther · 4/29/2026
Summary
The site bluekit.cc presents itself as a phishing kit platform, as indicated by the page title 'bluekit - your phishing kit'. The content suggests it is a service for managing phishing campaigns, but there are no forms or credential capture mechanisms observed in the static HTML. However, the presence of multiple scripts and POST requests indicates potential for dynamic credential collection. The domain is newly registered and hosted on Cloudflare, which is often used to obscure malicious activities.
Evidence Summary
▸Observed 3 capture stage(s); canonical stage is late_render_3s.
▸POST targets observed during capture: https://bluekit.cc/cdn-cgi/rum?, https://bluekit.cc/cdn-cgi/challenge-platform/h/g/jsd/oneshot/a80f1640690f/0.09966826352995961:1777025392:jvmHxRGCLn8x-SC13FrRoY5ZZdqsQB3lwpLZj4haT5w/9f1483516d8bf799.
▸Distinctive asset clues: rocket-loader.min.js, 0bwofn5_qzn1~.js, 012dkubyn4~zy.css, 16-2pyq9-p~3g.css, image.
Capture
Stages: 3
Canonical: Late Render (+3s)
Changed: No
Credential Signals
Forms: 0
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 49
Hosts: 2
Domains: 2
Attack Techniques (1)
POST requests to suspicious endpoints
Indicators of Compromise (1)
▸Page title: 'bluekit - your phishing kit'
Risk AssessmentUsed in abuse reports
The site bluekit.cc is associated with phishing kit services, as indicated by its title and content. Although no direct credential harvesting mechanisms were observed, the site's nature and the presence of dynamic scripts suggest potential for abuse. The domain is newly registered and hosted on Cloudflare, which raises concerns about its intent. It is recommended to monitor this domain closely for any changes in behavior or content.
Recommended Action
Monitor
Cross-Reference9
URL Intelligence
Domain Intelligence
IP Intelligence
Public threat feed available — JSON API